SoK: Failure Modes in Common Criteria Product Evaluation - a Taxonomy and Design-For-Evaluability Guidance

The Common Criteria CC; ISO/IEC 15408 is the principal international framework for evaluating the security of IT products, and its certificates gate procurement across government, defense, and regulated industry. Yet evaluations routinely stall, fail, or yield certificates whose assurances do not...

PT-2024-34354

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

PT-2024-34351

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

PT-2024-34353

Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...

CVE-2021-32015

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

CVE-2021-32015

In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Comm...

crypto-policies bug fix and enhancement update

Crypto policies is a system component that configures the core cryptographic subsystems, covering the TLS, IPSec, SSH, DNSSec, and Kerberos protocols. It provides a small set of policies, which the administrator can select. Bug Fixes and Enhancements: FIPS:OSPP needs to have the same settings as...

PAN-OS Management Server Privilege Escalation

The vulnerability of the PAN-OS operating system management server exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary operating system commands...

Scientific Linux Security Update : pki-core on SL7.x x86_64 (20180626)

Security Fixes : - pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access CVE-2018-1080 Bug Fixes : - Previously, when ECC keys were enrolled, Certificate Management over CMS CMC authentication failed with a 'TokenException: Unable to insert certificate...

Moderate: Red Hat Security Advisory: pki-core security, bug fix, and enhancement update

An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SOL16920 - OpenSSL vulnerability CVE-2014-8176

The failover.secure system database variable is only available in BIG-IP 11.5.0 and later, and is disabled by default. However, Common Criteria mode enables the failover.secure database variable. The BIG-IP Edge Client system will be vulnerable only when connected to a malicious server...

CheckPoint Secure Platform Multiple Buffer Overflows

Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...